Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
File: TzvVbotU5tonu-ZiLaxny_Aqgeo.mft (raw, json)
Hash identifier: Tj9wEKhTBi2tIQLmWMAh4PfgIHfsuvtPHesQPJBoLfg=
Subject key identifier: 5A:59:0A:04:87:4E:78:6C:2B:02:D8:3B:BB:0C:D7:14:A5:03:C0:24
Authority key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
Certificate issuer: /CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Certificate serial: 01988E10136AE97572695B61A7328FE9FA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 09:01:14 +0000
Manifest this update: Sat 09 Aug 2025 09:01:14 +0000
Manifest next update: Sun 10 Aug 2025 09:01:14 +0000
Files and hashes: 1: 6aBtyL1HCBLQz8Fcxx2-wbI-JSY.roa (hash: s+Yjky9WV0WGtiJ2UXV97kZc6gRv1napm2o37+mL6NI=)
2: R0B0S-Vvq6PSGq8IAqKsdnjdNUo.roa (hash: jZBNXVMhAxnq4wWzeXUVcxAP1mha5zeShrdHGeYvBL4=)
3: TzvVbotU5tonu-ZiLaxny_Aqgeo.crl (hash: BOcnoheDn8wmEgio56OUZQJxBM8GZMs/KCGs1cTJGFU=)
4: snxuxsWrIVBOH4PJX-798Ws3-_I.roa (hash: eUyKfNa1R42Kf80mOcHHq43jou6WV27ocUUMJBjr/10=)
5: wnKhG27ddvv9DbopEcZ0e8BfSyE.roa (hash: 5bhpzUqfkiYr3WyfWoYZHsfUt3MVDy9FbR7pi02+AvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:10:13:6a:e9:75:72:69:5b:61:a7:32:8f:e9:fa:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Validity
Not Before: Aug 9 09:01:14 2025 GMT
Not After : Aug 10 09:01:14 2025 GMT
Subject: CN=5a590a04874e786c2b02d83bbb0cd714a503c024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f5:c3:0d:58:ba:4e:ce:8b:5f:04:47:56:6f:
1f:f1:bc:00:1d:4e:00:31:e1:46:1e:31:24:bc:e7:
a3:13:f6:8f:cb:68:88:95:8b:65:d8:f9:ee:f0:4a:
4a:fc:a7:e5:60:d0:a0:de:5d:3f:01:d1:f6:73:41:
6c:e1:f5:97:aa:3f:f6:7c:ac:b1:6e:02:5e:66:fd:
2d:54:37:21:d0:54:d6:95:a5:e6:55:3e:50:e3:08:
41:1b:64:d7:56:96:8d:75:25:a5:45:8b:86:65:9a:
42:a7:08:b9:54:2c:01:c5:16:c1:27:eb:d8:42:f0:
91:9a:2f:f7:18:09:d6:71:2d:9f:e1:9a:3d:e6:ab:
62:cb:98:85:6d:36:bc:9c:38:4b:0f:b9:25:d9:7b:
36:3c:ab:41:5c:1f:03:c6:f4:af:06:72:ae:6b:70:
21:45:23:b3:be:44:d1:8a:b8:27:fe:8e:c2:c0:b5:
d3:e4:53:cb:8f:03:07:24:71:f3:7e:78:34:db:eb:
88:b0:30:34:a5:df:59:7b:c2:08:31:2c:f3:2c:70:
bd:bd:8f:ac:8d:71:05:e0:8b:af:80:04:78:25:02:
9e:a3:8f:3b:f7:bc:00:41:34:d8:9a:02:57:cf:e0:
07:bf:01:1f:7c:3c:38:84:2e:a6:e0:d0:a0:2c:bd:
b3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:59:0A:04:87:4E:78:6C:2B:02:D8:3B:BB:0C:D7:14:A5:03:C0:24
X509v3 Authority Key Identifier:
keyid:4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:67:5b:bd:67:c2:e9:87:1a:80:c5:f5:20:44:e1:bb:c7:93:
ec:42:a6:10:d1:45:78:b9:15:70:40:1f:f3:09:50:65:54:b3:
ee:49:0e:24:a4:25:3a:ba:47:0e:63:5b:3f:e9:38:7f:d2:0e:
a9:5f:85:81:58:38:48:f1:65:9c:11:9e:d6:24:7e:7d:f7:80:
6e:ed:39:cd:9e:43:8f:6b:09:e0:ce:3a:ad:f0:60:10:44:ce:
ef:22:13:fd:cd:16:bf:a6:7a:a4:1e:71:e1:b3:c7:03:5c:b8:
fb:82:ae:df:a2:d5:52:ce:d8:10:2b:8a:e0:1f:9d:2d:5e:5d:
fb:4f:75:04:d7:78:d9:ed:9d:7a:f0:17:18:a1:11:3a:c6:52:
54:95:b1:64:e6:77:33:c7:3d:aa:8a:d0:92:28:86:21:77:ab:
a2:9c:76:e9:b2:36:86:50:29:98:a5:2c:45:da:d7:3f:c4:52:
a6:fb:9a:17:49:f7:f3:c9:30:5c:98:a3:0e:19:b2:81:32:6d:
16:8b:f1:87:e6:a9:ba:21:8a:48:0b:1b:aa:4d:c9:15:f3:f5:
c4:67:32:ae:6b:13:9b:bb:af:f0:23:7d:07:94:a8:ea:5c:ba:
84:3a:f5:3c:d8:95:39:ba:da:0e:83:6d:06:64:f3:8a:50:fb:
6d:ce:c2:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiOEBNq6XVyaVthpzKP6fpPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmM2JkNTZlOGI1NGU2ZGEyN2JiZTY2MjJkYWM2N2NiZjAy
YTgxZWEwHhcNMjUwODA5MDkwMTE0WhcNMjUwODEwMDkwMTE0WjAzMTEwLwYDVQQD
Eyg1YTU5MGEwNDg3NGU3ODZjMmIwMmQ4M2JiYjBjZDcxNGE1MDNjMDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvXDDVi6Ts6LXwRHVm8f8bwAHU4A
MeFGHjEkvOejE/aPy2iIlYtl2Pnu8EpK/KflYNCg3l0/AdH2c0Fs4fWXqj/2fKyx
bgJeZv0tVDch0FTWlaXmVT5Q4whBG2TXVpaNdSWlRYuGZZpCpwi5VCwBxRbBJ+vY
QvCRmi/3GAnWcS2f4Zo95qtiy5iFbTa8nDhLD7kl2Xs2PKtBXB8DxvSvBnKua3Ah
RSOzvkTRirgn/o7CwLXT5FPLjwMHJHHzfng02+uIsDA0pd9Ze8IIMSzzLHC9vY+s
jXEF4IuvgAR4JQKeo48797wAQTTYmgJXz+AHvwEffDw4hC6m4NCgLL2zywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpZCgSHTnhsKwLYO7sM1xSlA8AkMB8GA1UdIwQY
MBaAFE871W6LVObaJ7vmYi2sZ8vwKoHqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZmUxNDktOGE3Mi00N2ZkLTg3MzUt
N2RjNWJkZGY5MWI1LzEvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS82ZmUxNDktOGE3Mi00N2ZkLTg3MzUtN2RjNWJkZGY5MWI1
LzEvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGdbvWfC
6YcagMX1IEThu8eT7EKmENFFeLkVcEAf8wlQZVSz7kkOJKQlOrpHDmNbP+k4f9IO
qV+FgVg4SPFlnBGe1iR+ffeAbu05zZ5Dj2sJ4M46rfBgEETO7yIT/c0Wv6Z6pB5x
4bPHA1y4+4Ku36LVUs7YECuK4B+dLV5d+091BNd42e2devAXGKEROsZSVJWxZOZ3
M8c9qorQkiiGIXeropx26bI2hlApmKUsRdrXP8RSpvuaF0n388kwXJijDhmygTJt
Fovxh+apuiGKSAsbqk3JFfP1xGcyrmsTm7uv8CN9B5So6ly6hDr1PNiVObraDoNt
BmTzilD7bc7CTA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 15:09:31 2025 by rpki-client